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TITLE OF THE INVENTION 
CONTENT PROCESSING SYSTEM AND CONTENT PROTECTING METHOD 
CROSS— REFERENCE TO RELATED APPLICATIONS 
This application is based upon and 



claims the 



various digital 



5 benefit of priority from the prior Japanese Patent 

Application No. 2000-069262, filed March 13, 2000 , the 
entire contents of which are incorporated herein by- 
reference* 

BACKGROUND OF THE INVENTION 
10 The present invention relates to a content 

processing system capable of processing 

contents such as image data and sound qata, and a 

content protecting method. 

Recently, with the advance of computer 
15 technologies, various electronic apparatuses such as 

multimedia personal computers, set-top 

and game machines have been developed. 

apparatuses of this type can reproduce 

contents such as image data and sound data stored in 
20 recording media, and can also use digital contents by 

downloading them through, e.g., the Internet. 

These digital contents can be copied or downloaded 

without being degraded by the use of digital encoding 

technologies such as MPEG2 and MP3. Eence, the 
25 necessity of technologies for protecting such digital 

contents from illegal use is being demanded from the 

viewpoint of copyright protection. 



boxes , players , 
The electronic 
diverse digital 
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beginning 



and 



if ormation 



Recently, therefore, these mechani 
authentication and encryption are 
developed primarily for memory cards 
media, which allow exchange of contents 
electronic apparatuses having a valid 
protecting function and recording media 

A representative authentication 
technology is a mechanism which performs 
by using device identification in 
electronic apparatus and a key matrix 
list information recorded on a recording 
thereby eliminating invalid electronic 
issuing an encryption key to valid e 
apparatuses. By using this mechanism, 
by simply updating only the revocation 
recorded on a recording medium before 
nullify the use of device identification 
found to be hacked, thereby protecting 
illegal attacks. 

As the data size of the revocation 
tion is increased, the number of the 
device identification information to b^ 
be increased. Accordingly, the data s 
as large as possible. 

In practice, however, different 
media have largely different storage c 
Therefore, if pieces of revocation li 



sms of 

to be 
removable 
only between 
cbpy right 



.si: 



add encryption 

authentication 
unique to an 
called revocation 
medium, 
apparatuses and 
lecjtronic 

it is possible, 
list information 
Shipment, to 
information 
contents against 

list informa- 
ccj>mbinations of 
eliminated can 
ze is preferably 

tVpes of recording 
Opacities . 
information 
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memory 



information 



list 



media - 



allocable 



having a common size are used between 
of media, various problems arise. For 
size of the revocation list information 
for a recording medium such as a memory 
5 relatively small storage capacity, a 

allocated as a user data area is reduce^ 
number of device identification 
be authenticated by the revocation list 
finite. Hence, if common revocation 

10 is defined between different types of 

such as an insufficient number of 
identification information arise. 

On the other hand, when revocation 
corresponding device identification i 

15 defined for each type of recording 

possible to use revocation list inform^t 
size optimum for each recording media 
is the case, however, an apparatus, 
computer, capable of handling various 

20 recording media poses the following 

to the compatibility between the rec 

For example, an application program 
valid apparatus which is assigned device 
information for a memory card can procqs 

25 a memory card to be used, by performing 

by using the device identification 
apparatus and revocation list information 



different kinds 
example, if the 
is too large 
card having a 
size to be 
Also, the 
which can 
information is 
information 
La, problems 
device 



such 



information 



medium 



type. 



types 



problem 
ording 



information and 
are 

it is 
ion having a 

When this 
as a personal 
of 

in regard 
media . 
running on a 
identification 
s a content on 
authentication 
of the 
previously 



information 
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recorded on the memory card. However, when a recording 

i 

medium, such as a DVD-RAM, other than a ( memory card is 

i 

to be handled, processing such as transfer of a content 

from the memory card to the DVD-RAM cannot be performed 

! 

5 because revocation list information previously recorded 

on the DVD-RAM cannot be processed by the device 
identification information for a memoryj card. 
Accordingly, even when a user has purchased a valid 
DVD-RAM drive corresponding to a copyrijght protecting 
10 function, DVD-RAMs cannot be actually hjandled similarly 

to memory cards. This is very inconvenient for the 
user. 

I 
i 

BRIEF SUMMARY OF THE INVENTION 
Accordingly, it is an object of the present 

15 invention to provide a content processijng system and 

content protecting method capable of hajndling a 
recording medium of a certain media typle by using 
device identification information corresponding to 
another specific media type, and also capable of 

20 equally handling valid recording media corresponding to 

a copyright protecting function regardless of the types 
of these media. 

According to one aspect of the present invention, 
there is provided a content processing system for use 

25 in an electronic apparatus, comprising: means for 

acquiring first revocation list informcLtion corre- 
sponding to a first media type; and means for recording 
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oh 



recorded 



and 



authentication 



the first revocation list information 
medium of a second media type, the 
revocation list information being used 
tion between the electronic apparatus 
5 medium of the second media type. 

According to another aspect of the 
invention, there is provided a content 
method comprising the steps of: loading 
tion list information corresponding to 

10 type into an electronic apparatus; rec 

first revocation list information on a 
of a second media type; and using the 
revocation list information in 
the electronic apparatus and the 

15 the second media type. 

Additional objects and advantages 
will be set forth in the description which 
in part will be obvious from the 
learned by practice of the invention. 

20 advantages of the invention may be reali 

obtained by means of the instrumentalities 
combinations particularly pointed out 
BRIEF DESCRIPTION OF THE SEVERAL VIEWS 
The accompanying drawings, which 

25 in and constitute a part of the specifi 

illustrate presently preferred 
invention, and together with the generdl 
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protecting 
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recorded first 
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of the invention 
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ion 



serve 



invention 



given above and the detailed descripti 
preferred embodiments given below, s 
principles of the invention. 

FIG* 1 is a block diagram showing 
5 configuration of a content processing 

to an embodiment of the present 

FIGS . 2A and 2B are views for 
relationship between a media key block 
used in the system of the embodiment; 
10 FIGS* 3A and 3B are views for 

principle of content encryption/decrypt 
system of the embodiment; 

FIG* 4 is a view for explaining 
media key block writing process 
15 of the embodiment; 

FIG* 5 is a view for explaining 
content writing process performed by 
embodiment ; and 

FIG. 6 is a view for explaining 
20 content reproducing process performed 

the embodiment. 

DETAILED DESCRIPTION OF THE 
An embodiment of the present i 
described below with reference to the 
25 drawing. 

FIG. 1 shows the system configurat 
processing system according to an 



the basic 
system according 



explaining 



the 

and device key 



explaining 



the 

ion used in the 



the 



performed 
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the 
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to explain the 



by 



procedure of a 
by the system 

procedure of a 
system of the 

procedure of a 
the system of 
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present invention. This content proces 
processes various digital contents such 
and sound data and includes an electronic 
such as a personal computer. A content 
5 method of this content processing system 

the management of content encryption 
use of a media-unique key unique to each 
medium for recording contents. This is 
contents of the same recording medium 
10 even when the medium is used by another 

computer or electronic apparatus, 
encrypted and recorded on each recording 
using a media-unique key obtained by 
the medium. 

15 Management of content encryption 

the media-unique key is executed by a 
processing application program 301 i 
function dedicated to the management, 
program 301 is implemented as tambour 

20 software. Tambour resistant software 

function against attacks such as illega 
analysis and alteration. 

In this embodiment, an SD (Secure 
card 101 and a DVD-RAM 201 are used as 

25 used to record and read out content. 

the SD memory card 101 are performed 
interface 102 of this electronic 



res 



has 



via 



apparatu 



sing system 
as image data 

apparatus 
protecting 
is based on 

ion by the 
recording 
to allow 

be reproduced 
personal 
are 
medium by 
authentication of 

/decryption using 
content 
incorporating a 

•phis application 
istant 

a defending 
internal 
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for 



previous 



identif i 



each 



driver 302 as a device driver program 
an SD card. Read and write of the DVD- 
performed by a DVD-RAM drive 202 connected 
IDE /AT API interface 203 of the electronic 
5 a DVD-RAM driver 303 as a device driver 

controlling the DVD-RAM drive 202* 

The SD driver 302 and the DVD-RAM 
also implemented as tambour resistant 

In this embodiment, content encrypjt 

10 management using these recording media 

using revocation list information 
on each recording medium and device 
information previously prepared for 
apparatus and unique to that electronic 

15 The revocation list information is 

information in which a list of device 
information of electronic apparatuses 
for content protection is embedded 
is used to check whether the device i 

20 information of an electronic apparatus 

authenticated is to be nullified, and 
media-unique key if the device identifi 
information is found to be valid. This 
information is made up of a large number 

25 key matrix information and is referred 

key block (MKB) hereinafter. A recording 
to have a valid copyright protecting 



controlling 
RAM 201 are 
to an 
apparatus and 
program for 



to 



Thi 



ident 



to 



ICc 



driver 303 are 
spf tware. 

ion/decryption 
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ly recorded 
ication 
electronic 
apparatus . 
authentication 
identification 
be eliminated 
is information 

if ication 
to be 

generate a 
ation 

revocation list 
of pieces of 
to as a media 
medium found 
fdnction is 
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information 



memory 



shipped with the media key block (MKB) 

The device identification 
identification information assigned to 
apparatus, and is issued only to an 
5 apparatus found to have a valid copyri 

function. Each electronic apparatus is 
this device identification information 
In the following description, the devic^ 
information is referred to as a device 

10 The content of the media key block 

from one recording medium to another 
key blocks (MKBs) are used in the SD 
and the DVD-RAM 201. That is, a media 
(MKB__SD1) defined for an SD memory card 

15 recorded on the SD memory card 101. 

block (MKB_RAM) defined for a DVD-RAM i 
recorded on the DVD-RAM 201. These 
are recorded in write-protected read 
in a system area of the SD memory card 

2 0 lead-in area of the DVD-RAM 201. 

A device key (DevKEY_SD) assigned 
electronic apparatus of this embodiment 
the media key block for an SD memory 
application program 301 performs 

25 SD memory card 101 by using this device 

When the SD memory card 101 is found to 
this authentication, the application 



recorded on it. 
is 

feach electronic 



Also 



13 



media 



only 



electronic 

gjit protecting 
shipped with 
Embedded in it. 

identification 
xey (DevKEY). 

(MKB) differ 
different media 

card 101 
|cey block 
is previously 
, a media key 
previously 
key blocks 
areas, i.e. , 
L01 and a 



to the 
corresponds to 
The 

of the 
key (DevKEY_SD) 
be valid by 
program 301 



card 



authentication 
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result 



information 



memory- 



generates a media-unique key (Kmu__SDl) 
key unique to the SD memory card 101 by 
key obtained by the authentication 
ID (Media ID1) as identification i 
5 the SD memory card 101. Encryption and 

content to be recorded on the SD memory 
managed by using the media-unique key ( 
is, the application program 301 writes 
data on the SD memory card 101. 

10 *Ktl [Content] : a content encrypted 

key called a title key Ktl 

*Kmu__SDl [Ktl ] : a title key encrypted 
media-unique key (Kmu_SDl) of the SD 

Note that a time variable key using 

15 numbers can be used as the title key 

The DVD-RAM driver 303 provides 
program 301 with a function of handling 
similarly to an SD memory card. All of 
between the application program 301 and 

20 and read and write of the DVD-RAM 201 

tion program 301 are performed via the 
driver 303. 

The DVD-RAM driver 303 has a device 
( DevKE Y__RAM ) corresponding to a media 

25 (MKB__RAM) for a DVD-RAM, and can perforhi 

of the DVD-RAM 201. This DVD-RAM drivet 
includes the following functions: 



as an encryption 
using a media 
and an media 
unique to 
decryption of a 
card 101 are 
:Kmu__SDl ) . That 
the following 



Ktl 



the 



by 



by a private 



by the 

card 101 
, e.g., random 



application 
a DVD-RAM 
authentication 
the DVD-RAM 201 
the applica- 

DVD-RAM 



key 



key 

block 
authentication 
303 further 



- 11 - 



f rom 



latest 



drawing 



•a function of acquiring the latest: 
block (MKB_SD2) for an SD memory card 
or from an installation CD of the DVD- 
and writing this media key block in the 
Of the DVD-RAM 201 

•a function of reading out the 
block (MKB_SD2) for an SD memory card, 
media key block (MKB__RAM) for a DVD-RAM 
a request for authentication of the DVD 
the application program 301 , and trans 
readout media key block to the applicat 
Details of these functions will be 
with reference to the accompanying 
(Media Key Block) 

The relationship between the media 
the device key will be described below 
to FIGS- 2A and 2B. 

As described above, the media key 
device key are defined for each type of 
medium. FIG. 2A shows the relationship 
media key block (MKB_SD1) and the device 
( DevKE Y__SD ) for an SD memory card. The 
(DevKEY_SD) includes 16 columns of 
16 columns of corresponding pieces of 
(KEY). The media key block (MKB__SD1 ) 
encrypted key matrices of about 16 
The value of the index in each column 



indices 



key 



inc 



columns 



of 



media key 

a WEB server 
driver 303 
user data area 



media key 
instead of the 
, in response to 
-RAM 201 from 
f erring the 
ion program 301 
described later 
from FIG. 4. 



key block and 
with reference 

block and the 
recording 
between the 

key 
device key 

(INDEX) and 
information 
ludes 

x 512 rows, 
the device key 
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information 



on 



device 



(DevKEY_SD) indicates the reference 
media key block (MKB_SD1); key i 
position which is in the same column as 
and which is indicated by the value of 
looked up* For example, when the index 
first column is 1 as shown in FIG. 2A 
in the first column and the first row 
block (MKB_SD1) is looked up. In this 
media key A [Km] encrypted by the key ( " 
example) in the first column of the 
(DevKEY_SD) or an error code A[Ec] is 
error code means that the corresponding 
invalid. Authentication is successful 
encrypted by the corresponding key 
is acquired by one of the 16 indices, 
arrangement , a maximum of 5 12 16 device 
nullified. 

FIG* 2B shows the relationship 
key block (MKB_RAM) and the device key 
for a DVD-RAM. The device key (DevKEY 
16 columns of indices (INDEX) and 16 
corresponding pieces of key information 
media key block (MKB_RAM) includes 
matrices of about 16 columns x 2,048 
this media key block (MKB_RAM) can nu 
2,048 16 device keys. 



position 
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in a row 
a certain index 
that index is 
value in the 
, the position 

the media key 
position, a 
A" in this 
key 

Stored. This 
device key is 
if a media key 

(KEY) 
With this 
keys can be 



information 



between the media 
( DevKE Y_JRAM ) 

RAM) includes 
columns of 

(KEY). The 
encrypted key 

rtows . Accordingly , 
ify a maximum of 
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an 



(Encryption/Decryption of Content) 

The principle of encryption/decrypft 
content performed by using a recording 
described below with reference to FIGS. 
5 principle will be explained by taking 

as an example* 
<Content Recording> 

FIG. 3A shows the flow of processi 
content recording. First, authentication 

10 memory card device key (DevKEY_SD) and 

block (MKB_SD1) recorded on the SD memqry 
performed (process #1), and a media ke^ 

The media-unique key (Kmu_SDl) is 
arithmetic operation (process #2) using 

15 Km and the media ID (Media IDl) recorded 

memory card 101. Subsequently , a proces 
of encrypting a predetermined title key 
media-unique key (Kmu__SDl) is executed 
Kmu_SDl[Kt]. Also, a process (process 

20 encrypting a content to be recorded by 

is performed to generate Kt [ Content ]• 
Kt[ Content] are recorded on the SD memory 
<Content Reproduction> 

FIG. 3B shows the flow of process 

25 content reproduction. First, 

SD memory card device key (DevKEY_SD) 
block (MKB__SD1) recorded on the SD memory 



ion of a 
nedium will be 
3A and 3B. The 
SD memory card 



authentication 



ng during 

using the SD 
the media key 
card 101 is 
Km is generated, 
generated by an 
the media key 

on the SD 
s (process #3) 
Kt by the 
to generate 
#4) of 

the title key Kt 
Kmu_SDl[Kt] and 
card 101. 



£ng during 

using the 
^nd the media key 
card 101 is 
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Kctiu 



Also 



performed (process #5), and the media k^y Km is 
generated. 

The media-unique key (Kmu_SDl) is 
arithmetic operation (process #6) using 
Km and the media ID (Media IDl) recorded 
memory card 101. Subsequently , a proces 
of decrypting the encrypted title key 
using the media-unique key (Kmu_SDl) is 
thereby obtaining the title key Kt. 
(process #8) of decrypting the encrypted 
Kt[ Content] by using the title key Kt 
thereby obtaining and reproducing the 
(Installation of DVD-RAM Driver) 

A process of writing the latest 
MKB_SD2 for an SD memory card into the 
be described below with reference to 

This writing process is performed 
of the DVD-RAM driver 303 when this 
installed. After the installation, th4 
can be executed at any arbitrary timing 
setup program included in the DVD-RAM 
Before the writing process is executed 
function of handling DVD-RAM similarly 
card?" is of course indicated to a useifr 
writing process is executed only when 
the addition. 

Note that this installer (or setub 



generated by an 
the media key 

on the SD 
s (process #7) 

_SDl[Kt] by 
executed, 
, a process 
content 
Us performed, 
clontent . 

mqdia key block 
DVD-RAM 201 will 
. 4. 

by the installer 
303 is 
writing process 
by activating a 
driver 303. 

a message "add 
to SD memory 
, and the 
the user accepts 



FIG 



dri.ver 



program) 401 
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can also be regarded as a part of the DVD— RAM driver 
303. In this sense, the DVD-RAM driver jS03 itself 
writes the media key block MKB__SD2 . 

(51) The installer (or setup progrkm) 401 has the 
5 DVD-RAM device key ( DevKEY__RAM ) . The installer (or 

setup program) 401 performs authentication of the 
DVD-RAM 201 by using the device key (Dev]£EY_RAM) and 
the media key block (MKB_RAM) recorded in the lead-in 
area of the DVD-RAM 201 , thereby obtaining the 

10 media-unique key ( Kmu_RAM ) (process #11) L More 

specif ically, the media key Km is obtained first by 
looking up the media key block (MKB_RAM) by using the 
device key (DevKEY_RAM) . The media-uniqilie key 
(Kmu_RAM) is then generated from this me<|iia key Km and 

15 the DVD-RAM inherent media ID (Media ID2|) recorded in 

the lead-in area of the DVD-RAM 201. 

(52) The installer (or setup progrkm) 401 
acquires the latest media key block (MKB 
card memory from a WEB server 501 (process #12). 

20 (S3) The installer (or setup progrkm) 401 

encrypts the media key block (MKB_SD2) by using the 
media-unique key (Kmu_RAM) unique to a DVD-RAM, and 
writes the result (Kmu_RAM[MKB_SD2 ] ) in ^he user data 
area of the DVD-RAM 201 (process #13). 

25 (Writing of Content) 

An operation of writing a content ih. the DVD-RAM 
201 will be described below with reference to FIG. 5, 



SD2) for an SD 
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the 



perf c 



(DevKSY 



Assume that a content recorded on the SD 
101 is to be copied or transferred to 

(Al) The application program 301 
authentication of the SD memory card 101 
5 driver 302 by using the device key ( 

media key block (MKBJ3D1) recorded on 
card 101, thereby obtaining the media- 
(Kmu_SDl) (process #21). More specific 
key Km is obtained first by looking up t 

10 block (MKB_SD1) by using the device key 

The media-unique key (Kmu_SDl) is then 
this media key Km and the SD memory card 
ID (Media ID1) recorded on the SD memory 
(A2) The application program 301 

15 encrypted title key (Kmu_SDl [Kt ] ) from 

card 101 via the SD driver 302, and 
readout title key by using the media- 
(Kmu_SDl) to obtain Kt (process #22). 

(A3) The application program 301 

20 for authentication of the DVD-RAM 201 to 

driver 303. In response to this request 
driver 303 performs authentication of th^ 
by using the device key ( DevKE Y__RAM ) and 
block (MKB_RAM) recorded in the lead-in 

25 DVD-RAM 201, thereby obtaining the media 

( Kmu_RAM ) (process #23). More specific 
key Km is obtained first by looking up 



the 



unique 



ally, 



decrypt 



unique 



is 



memory card 
DVD-RAM 201. 
orms 
via the SD 
_SD) and the 
SD memory 
key 
, the media 
le media key 
( DevKEY_SD ) . 
generated from 
inherent media 
card 101. 

out the 
SD memory 
s the 
key 



reads 



the 



sues a request 
the DVD-RAM 
the DVD-RAM 
DVD-RAM 201 
the media key 
4rea of the 
unique key 
, the media 
media key 



ally 



the 
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SD2 



readout 



driver 



block (MKB_RAM) by using the device key 
The media-unique key (KmuJRAM) is then 
this media key Km and the media ID (Media 
DVD-RAM 201. 
5 (A4) The DVD-RAM driver 303 reads 

encrypted media key block ( Kmu_RAM [ MKB_; 
on the DVD-RAM 201 , and decrypts the 
block by using the media-unique key (Kmu 
MKBJSD2 (process #24). The DVD-RAM 

10 transfers this MKB_SD2 to the application 

(A5 & A6) When acquiring MKB__SD2 
303, the application program 301 perform^ 
tion of the DVD-RAM 201 by using this 
the device key ( DevKEY_SD ) , thereby 

15 media-unique key (Kmu_SD2) (process #25) 

specifically, the media key Km is obtain 
looking up the media key block (MKB_SD2) 
device key ( DevKE Y_SD ) . The media-uniqub 
is then generated from this media key Km 

20 ID (Media ID2) of the DVD-RAM 201. 

(A7) The application program 301 
title key Kt obtained in process #22 by 
media-unique key (Kmu_SD2), thereby 
Kmu_SD2[Kt]. The application program 3 

25 Kmu_SD2[Kt] into the DVD-RAM 201 via the 

303 (process #26). 

(A8) The application program 301 



( DevKEY_RAM ) . 
generated from 
ID2) of the 



from 



MKB 



obtaining 



(01 



out the 

] ) recorded 
media key 
RAM) to obtain 
303 

program 301. 

the DVD-RAM 
authentica- 
SD2 and 
the 
More 
d first by 
by using the 

key (Kmu_SD2) 
and the media 

encrypts the 
using the 



obtaining 



writes this 
DVD-RAM driver 



loads the 



- 18 - 



:ation 



the 



encrypted content (Kt [Content ] ) from the 
101, and writes the content into the DVD 
the DVD-RAM driver 303. 
(Reproduction of Content) 
5 An operation by which the applic 

reproduces a content recorded on the DVD 
be described below with respect to FIG. 

(Bl) The application program 301 i 
for authentication of the DVD-RAM 201 to 

10 driver 303. In response to this request 

driver 303 performs authentication of 
by using the device key ( DevKE Y__RAM ) and 
block (MKB_RAM) recorded in the lead-in 
DVD-RAM 201, thereby obtaining the media 

15 (Kmu_RAM) (process #31). More specific 

key Km is obtained first by looking up 
block (MKB_RAM) by using the device key 
The media-unique key (Kmu_RAM) is then 
this media key Km and the media ID ( 

20 DVD-RAM 201. 

(B2) The DVD-RAM driver 303 reads 
encrypted media key block ( Kmu_RAM [ MKB_: 
on the DVD-RAM201, and decrypts the 
block by using the media-unique key (Kmu 

25 MKB_SD2 (process #32). The DVD-RAM 

transfers this MKB_SD2 to the application 
(B3 & B4) When acquiring MKB_SD2 



[Media 



SD2 



readout 



SD memory card 
-RAM 201 via 



program 301 
-RAM 201 will 
6. 

ssues a request 

the DVD-RAM 
, the DVD-RAM 
DVD-RAM 201 
the media key 
area of the 
-unique key 
, the media 
media key 
( DevKEY__RAM ) . 
generated from 
ID2) of the 



ally, 
the 



out the 

] ) recorded 
media key 
_RAM) to obtain 
303 

program 301. 
flrom the DVD-RAM 
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obtained 



■uniqi.e 



303, the application program 301 performs 
authentication of the DVD-RAM 201 by usi 
and the device key (DevKEY_SD), thereby 
media-unique key (Kmu_SD2) (process #33) 
5 specifically, the media key Km is 

looking up the media key block (MKB__SD2 ) 
device key (DevKEY__SD) . The media 
is then generated from this media key Kn|i 
ID (Media ID2) of the DVD-RAM 201 . 

10 (B5) The application program 301 

encrypted title key (Kmu_SD2 [Kt] ) from 
via the DVD-RAM driver 303, and decrypt 
title key by using the media-unique key 
obtain Kt (process #34). 

15 (B6) The application program 301 

encrypted content (Kt [Content ] ) from th^ 
via the DVD-RAM driver 303, and re 
by decrypting it by using Kt (process 
In this embodiment as described 

20 driver 303 as a control program for a 

records the media key block MKB_SD for 
card on the DVD-RAM 201. By using this 
key block MKB_SD, the application progr 
authentication of the DVD-RAM 201. Thi£ 

25 DVD-RAM to be handled by the device key 

an SD memory card. Accordingly, valid 
corresponding to a copyright protecting 



ijng this MKB_SD2 
obtaining the 
More 
first by 
by using the 

key (Kmu__SD2) 
and the media 



^produces 



#3 



reads out the 
the DVD-RAM 201 
the readout 
(Kmu_SD2) to 

i*eads out the 
DVD-RAM 201 
the content 

5)- 

, the DVD-RAM 
-RAM drive 
^.n SD memory 
recorded media 
m 301 executes 

allows a 
DevKEY_SD for 
Recording media 
function can be 



above 



DVD 
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equally handled regardless of the types 
In particular, the media key block 
SD memory card is written in the DVD-RA#: 
being encrypted by Kmu_RAM obtained by 
5 using MKB_RAM . This consequently relatefs 

block MKB_SD to MKB_RAM, making it poss 
MKB_SD secret. 

In this embodiment, the latest med4a 
MKB_SD2 is acquired and recorded on a DVD 
10 an increase in the number of device keys 

eliminated. Therefore, if MKB_SD recorded 
memory card is the latest or a relatively 
MKB_SD can be recorded on a DVD-RAM, 

Also, a title key as a content enc 
15 encrypted by using a media-unique key. 

also possible to use a media-unique key 
and encrypt a content by using this medi|a 

A similar method can be applied not: 
DVD-RAM and SD memory card but also to 
20 recording media. 

Furthermore, this embodiment is apjfl 
only to PCs but also to all data proces 
(computer-applied apparatuses) using 
such as set- top boxes, game machines, 
25 players* 

Effects analogous to those of this 
readily obtainable by introducing a comriuter 



of these media* 
MKB_SD for an 
201 after 
authentication 

the media key 
ilble to keep 



and 



key block 
-RAM to meet 
to be 

on an SD 
new one, this 

ifyption key is 
However, it is 
as a title key 
-unique key. 
only to a 
vfarious other 

icable not 
s|ing apparatuses 
ssors , 
audio/video 



microproces 



embodiment are 
program 



\ 
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recording 



been 



recording 



ident.if 



spec 



recording 



describing the procedures of the content 
method explained in the embodiment to a 
a computer-applied apparatus via a 

In the present invention as has 
5 above, it is possible to handle a 

certain media type by using device i 
information corresponding to another 
type, and to equally handle valid 
corresponding to a copyright protecting 

10 regardless of the types of these media, 

content management having high 
compatibility is implemented. 

Additional advantages and modi 
readily occur to those skilled in the 

15 the invention in its broader aspects is 

the specific details and representative 
shown and described herein. Accordingly 
modifications may be made without 
spirit or scope of the general inventive 

20 defined by the appended claims and their 



extensibility 



f ication 



art 



departing 



management 
computer or to 
medium, 
described 

medium of a 
ication 
ific media 
media 
function 
Accordingly, 
and high 



s will 
Therefore, 
not limited to 
embodiments 
, various 

from the 
concept as 
equivalents . 



